Application Security Engineer | Senior

Details

This role involves ensuring software design security and defining secure implementation practices in collaboration with product development teams. The engineer acts as a liaison to maintain smooth security-related communication between technical teams involved in product releases. Development of scripts and security automation tools (e.g., for JIRA and GitLab) to enhance application security testing processes is required. Responsibilities include creating tasks for product security reviews (SAST/DAST/SCA results, application security testing), cooperating with product teams to make timely and educated security decisions, ensuring sufficient testing of mobile/desktop applications and browser extensions, supporting internal and external audits, and designing and delivering training for security engineering awareness and adoption. The engineer also actively identifies internal security gaps within products or the organization and addresses security questions to guide product security direction.

Responsibilities

• Ensure software design security and define secure implementation practices by syncing with product development teams
• Facilitate smooth security-related communication between technical teams
• Develop scripts and security automation tools to enhance security testing
• Create tasks for product security reviews such as SAST/DAST/SCA results
• Cooperate with product teams to learn about changes early for security decisions
• Ensure mobile/desktop applications and browser extensions are sufficiently tested
• Support internal and external security audits
• Design and deliver security engineering awareness and adoption training
• Actively identify internal security gaps
• Provide advice on the product's security direction

Requirements

• Proven experience in mobile/desktop applications security assessment including planning, testing, methodologies, and vulnerability reporting
• Good understanding of network models (OSI and TCP/IP) with a focus on VPNs
• Experience collaborating with stakeholders to scope security tests and identify remediation actions
• Knowledge of secure coding practices, especially differences and security considerations of C, C++, and Rust
• Strong sense of ownership with problem-solving and investigative skills
• Experience with security topics across different operating systems: Linux, Android, iOS, macOS, Windows
• Ability to build and maintain relationships and influence key stakeholders
• Capability to make product-related business decisions based on threats and vulnerabilities
• Assertiveness combined with the ability to compromise

Salary

Gross Salary: 5400 - 6300 EUR per month (Gross)